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121. (Currently Amended) A computer-readable medium having stored thereon a data 
structure corresponding to a digital content package, the data structure including: 

a first data field containing encrypted digital content to be rendered in accordance 
with a corresponding digital license, the data structure being separate and apart fi:om the 
licen s e, the encrypted digital content being decrypt-able according to a decryption key (KD) 
obtained firom the license; 

a second data field containing a content^package a content or a package ID identifying 
one of the digital content and the package; and 

a third data field containing license acquisition information including a location of a 
license provider for providing the license 

wherein the license acquisition information is in an unencrypted form; 

wherein the license provider location is a network address; and 

wherein the data structure is provided by a content provider having a public key and a 
private key, the data structure fiirther including a fourth data field containing the content 
provider public key. 



122-123 (Canceled) 



124. (Currently Amended) The data structure of claim [[123]] \2l wherein the license 
provider location is an Internet address. 

Page 2 of 12 




DOCKET NO.: MSFT-0 103/127334.6 

Application No.: 09/482,843 

Office Action Dated: August 12, 2003 



PATENT 

REPLY FILED UNDER EXPEDITED 
PROCEDURE PURSUANT TO 
37 CFR§ 1.116 



125. (Canceled) 

126. (Currently Amended) The data structure of claim [[125]] \2\ wherein the content 
provider public key is encrypted according to the decryption key (KD). 

127. (Original) The data structure of claim 126 wherein the encrypted content provider 
public key is signed by the content provider private key, and wherein alteration of the 
encrypted content provider public key prevents validation of the data structure. 

128. (Currently Amended) The data structure of claim [[125]] 121 wherein the content 
provider public key is signed by the content provider private key, wherein alteration of the 
content provider public key prevents validation of the data structure. 

129. (Original) The data structure of claim 121 further comprising a fourth data field 
containing a key ID identifying the decryption key (KD). 

130. (Original) The data structure of claim 121 wherein the data structure is provided 
by a content provider authorized by a root source to provide the data structure, the data 
structure further comprising a fourth data field containing a certificate from the root source 
indicating that the content provider has authority from the root source to provide the data 
structure. 
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131. (Original) The data structure of claim 130 wherein the content provider has a 
public key and a private key, and wherein the certificate includes the public key of the 
content provider. 

132. (Original) The data structure of claim 131 wherein the root source has a public 
key and a private key, wherein the certificate is signed with the private key of the root soiree, 
and wherein the public key of the root source must be obtained to decrypt the encrypted 
signature. 

133. (Original) The data structure of claim 121 wherein the data structure is provided 
by a content provider authorized by an intermediary source to provide the data structure, the 
intermediary source in turn being authorized by a root source to authorize the content 
provider, the data structure further comprising a fourth data field containing a first certificate 
firom the root source indicating that the intermediary source has authority from the root 
source to authorize the content provider, and a fifth data field containing a second certificate 
fi'om the intermediary source indicating that the content provider has authority from the 
intermediary source to provide the data structure. 

134. (Original) The data structure of claim 133 wherein the content provider has a 
public key and a private key, wherein the intermediary source has a public key and a private 
key, wherein the first certificate includes the public key of the intermediary source, and 
wherein the second certificate includes the public key of the content provider. 
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135. (Original) The data structure of claim 134 wherein the root source has a public 
key and a private key, wherein the first certificate is signed with the private key of the root 
source, wherein the second certificate is signed with the private key of the intermediary 
source, wherein the public key of the root source must be obtained to decrypt the encrypted 
signature of the first certificate, and wherein the public key of the intermediary source is 
obtained firom the first certificate to decrypt the encrypted signature of the second certificate. 
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